Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0859
HistoryDec 07, 2013 - 12:00 a.m.

CVE-2013-0859

2013-12-0700:00:00
ubuntu.com
ubuntu.com
10

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.003

Percentile

69.3%

The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1
allows remote attackers to have an unspecified impact via a negative or
zero count value in a TIFF image, which triggers an out-of-bounds array
access.

Notes

Author Note
mdeslaur libav and ffmpeg codebases have diverged to the point of not being able to track both using the same CVE numbers. Marking this CVE as not-affected for libav.

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.003

Percentile

69.3%

Related for UB:CVE-2013-0859